Red Hat Multicluster Global Hub is a set of components that facilitate importing and managing multiple hub clusters from a single hub cluster. The security advisory RHSA-2026:21769 addresses multiple vulnerabilities in versions prior to 1.5.5, including CVE-2026-4427 and several others. These vulnerabilities span a variety of CWE categories such as race conditions, improper authentication, and memory issues. The update to version 1.5.5 includes security fixes, bug fixes, and updated container images to mitigate these issues. The advisory does not provide detailed CVSS scores but rates the overall impact as Important.

The vulnerabilities affect the security posture of Red Hat Multicluster Global Hub by potentially allowing exploitation of issues related to authentication, memory management, race conditions, and other weaknesses as indicated by the CWE list. The exact impact of each vulnerability is not detailed, but the collective rating is Important, indicating a significant security concern that could affect cluster management operations if left unpatched.

Red Hat has released version 1.5.5 of Multicluster Global Hub which includes security fixes for the identified vulnerabilities. Users should upgrade to version 1.5.5 or later to remediate these issues. No alternative mitigations or temporary fixes are indicated. Patch status is confirmed by the vendor advisory. Refer to the Red Hat Advanced Cluster Management for Kubernetes documentation and the official Red Hat advisory RHSA-2026:21769 for upgrade instructions.